ci: speed up dev image deploy (gha cache, amd64-only) (#1787)

- Publish dev image as linux/amd64 only to reduce CI time\n- Enable Buildx GHA cache for faster repeat builds\n- Drop QEMU step (no multi-arch in CI)\n- Always run ECR Public push steps (remove secrets-based conditionals)\n- Docs: clarify CI publishes amd64 only; arm64 build locally via buildx\n- Docker ignore: include Cargo.lock; ignore .git/.github to reduce context

Signed-off-by: jerry609 <1772030600@qq.com>

Author: jerry609

.dockerignore

@@ -1,9 +1,7 @@
 # Generated by Cargo
 # will have compiled files and executables
 **/target/
-# Remove Cargo.lock from gitignore if creating an executable, leave it for libraries
-# More information here https://doc.rust-lang.org/cargo/guide/cargo-toml-vs-cargo-lock.html
-Cargo.lock
+# Keep Cargo.lock in build context for reproducible + cache-friendly builds.
 
 # These are backup files generated by rustfmt
 **/*.rs.bk
@@ -33,3 +31,7 @@ buck-out
 docker/mono-engine-dockerfile
 docker/mono-pg-dockerfile
 docker/aries-engine-dockerfile
+
+# git / ci metadata (not needed for docker builds, reduces build context)
+.git/
+.github/

.github/workflows/mega-dev-image-deploy.yml

@@ -1,5 +1,6 @@
 name: Mega Dev Image deploy
 on:
+  workflow_dispatch:
   push:
     branches:
       - main
@@ -17,6 +18,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+  actions: write
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
@@ -25,9 +30,6 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
@@ -57,8 +59,10 @@ jobs:
           IMAGE_BASE="$REGISTRY/$REGISTRY_ALIAS/$REPOSITORY"
 
           docker buildx build \
-            --platform linux/amd64,linux/arm64 \
+            --platform linux/amd64 \
             --target runtime \
+            --cache-from type=gha,scope=mega-dev-image \
+            --cache-to type=gha,mode=max,scope=mega-dev-image \
             -t "$IMAGE_BASE:$IMAGE_TAG" \
             -t "$IMAGE_BASE:$IMAGE_TAG-$TIMESTAMP" \
             -f docker/dev-image/Dockerfile \

docker/dev-image/README.md

@@ -38,8 +38,8 @@ This image intentionally does **not** start Orion Server or PostgreSQL. It is de
 
 ### Supported Architectures
 
-- `linux/amd64` (x86_64)
-- `linux/arm64` (aarch64)
+- `linux/amd64` (x86_64) — published by CI
+- `linux/arm64` (aarch64) — supported by the Dockerfile; build locally with Buildx
 
 ---
 
@@ -126,6 +126,8 @@ docker logs -f orion-worker
 
 ### Multi-Architecture Build
 
+Note: CI currently publishes `linux/amd64` only. The multi-arch command below is for local testing and/or pushing to your own registry.
+
 ```bash
 docker buildx create --name mega-builder --use